Privacy Policy

1. Information we collect

• Account information (name, email) when you sign up or sign in.
• Workspace data you enter (CRM contacts, tasks, invoices, bookings).
• Booking guest details (name, email, phone) submitted on public booking pages.
• Integration data when you connect Google (described below).

2. Google integrations (Calendar, Gmail, Drive)

If you choose to connect Google, we request access only to provide the features you enable.

• Google Calendar: used to read busy times (availability) and create/update booking events (including Google Meet links) on the connected host’s calendar.
• Gmail sending: used to send booking emails (e.g. confirmations/reminders) from the connected account when enabled/available.
• Google Drive: used to let you attach Drive files/links to records you choose (e.g. bookings).

3. How we store and protect data

• We store application data in our database (Supabase/Postgres) under your workspace.
• For Google integrations, we store OAuth tokens required to keep the integration working (including refresh tokens where applicable).
• We limit access using multi-tenant controls and role-based access.

4. Sharing

We do not sell your personal information. We share data only with service providers required to operate the product (for example, Google APIs and email providers you configure) and when required by law.

5. Your choices

• You can disconnect Google at any time by removing access from your Google Account settings (Security → Third‑party access) and/or in-product if available.
• You can request deletion of your data (see Data Deletion section below).

6. Data deletion

To request deletion of your account/workspace data, follow the instructions on our Data Deletion page.

7. Contact

If you have questions about this Privacy Policy, contact us at [email protected].